Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255341 4.3 警告 マイクロソフト - Microsoft Internet Explorer の HTML コンテンツ作成の実装における削除済みの重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3327 2010-10-25 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
255342 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-3326 2010-10-25 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
255343 4.3 警告 マイクロソフト - Microsoft Internet Explorer における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3325 2010-10-25 16:31 2010-10-12 Show GitHub Exploit DB Packet Storm
255344 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1263 2010-10-25 16:29 2010-06-8 Show GitHub Exploit DB Packet Storm
255345 4.3 警告 サン・マイクロシステムズ
freedesktop.org
レッドハット
サイバートラスト株式会社
Glyph & Cog, LLC
- Xpdf および Poppler の ImageStream::ImageStream 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3609 2010-10-22 14:38 2009-10-15 Show GitHub Exploit DB Packet Storm
255346 4.3 警告 マイクロソフト - Microsoft Internet Explorer の toStaticHTML 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3243 2010-10-22 14:37 2010-10-12 Show GitHub Exploit DB Packet Storm
255347 2.6 注意 マイクロソフト - Windows 上で稼働する Microsoft Internet Explorer における重要なフォーム情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0808 2010-10-22 14:36 2010-10-12 Show GitHub Exploit DB Packet Storm
255348 5.1 警告 Yokka - 複数の Yokka 提供製品における実行ファイル読み込みに関する脆弱性 CWE-Other
その他
CVE-2010-3165 2010-10-22 11:09 2010-10-22 Show GitHub Exploit DB Packet Storm
255349 5.1 警告 フェンリル株式会社 - Sleipnir および Grani における実行ファイル読み込みに関する脆弱性 CWE-Other
その他
CVE-2010-3164 2010-10-22 11:08 2010-10-22 Show GitHub Exploit DB Packet Storm
255350 6.8 警告 フェンリル株式会社 - Sleipnir および Grani における DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2010-3163 2010-10-22 11:06 2010-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246871 8.8 HIGH
Network
libtiff
canonical
debian
libtiff
ubuntu_linux
debian_linux
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can… CWE-125
Out-of-bounds Read
CVE-2017-9935 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246872 5.5 MEDIUM
Local
long_range_zip_project
debian
long_range_zip
debian_linux
In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-9929 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246873 5.5 MEDIUM
Local
long_range_zip_project
debian
long_range_zip
debian_linux
In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-9928 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246874 7.8 HIGH
Local
lame_project lame The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overfl… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-9872 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246875 7.8 HIGH
Local
lame_project lame The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and ap… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-9871 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246876 5.5 MEDIUM
Local
lame_project lame The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application c… CWE-125
Out-of-bounds Read
CVE-2017-9870 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246877 5.5 MEDIUM
Local
lame_project lame The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application cr… CWE-125
Out-of-bounds Read
CVE-2017-9869 2024-11-21 12:37 2017-06-26 Show GitHub Exploit DB Packet Storm
246878 5.5 MEDIUM
Local
eclipse
debian
mosquitto
debian_linux
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information. CWE-200
Information Exposure
CVE-2017-9868 2024-11-21 12:37 2017-06-25 Show GitHub Exploit DB Packet Storm
246879 5.5 MEDIUM
Local
freedesktop
debian
poppler
debian_linux
The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF doc… CWE-125
Out-of-bounds Read
CVE-2017-9865 2024-11-21 12:37 2017-06-25 Show GitHub Exploit DB Packet Storm
246880 9.8 CRITICAL
Network
bmc server_automation BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass. CWE-863
 Incorrect Authorization
CVE-2017-9453 2024-11-21 12:36 2023-09-6 Show GitHub Exploit DB Packet Storm